diff --git a/charts/tensorflow/Chart.yaml b/charts/tensorflow/Chart.yaml index 2f230632..0ec79d6a 100644 --- a/charts/tensorflow/Chart.yaml +++ b/charts/tensorflow/Chart.yaml @@ -24,7 +24,7 @@ type: application # This is the chart version. This version number should be incremented each time you make changes # to the chart and its templates, including the app version. # Versions are expected to follow Semantic Versioning (https://semver.org/) -version: 4.8.0 +version: 4.9.0 # This is the version number of the application being deployed. This version number should be # incremented each time you make changes to the application. Versions are not expected to diff --git a/charts/tensorflow/values.schema.json b/charts/tensorflow/values.schema.json index a7584905..9c9a2c1a 100644 --- a/charts/tensorflow/values.schema.json +++ b/charts/tensorflow/values.schema.json @@ -144,6 +144,75 @@ } } }, + "security": { + "description": "security specific configuration", + "type": "object", + "properties": { + "password": { + "type": "string", + "description": "Password", + "default": "changeme", + "x-form": { + "value": "{{project.password}}" + }, + "x-onyxia": { + "overwriteDefaultWith": "{{project.password}}" + } + }, + "allowlist": { + "type": "object", + "description": "IP protection", + "properties": { + "enabled": { + "type": "boolean", + "title": "Enable IP protection", + "description": "Only the configured set of IPs will be able to reach the service", + "default": true, + "x-form": { + "value": "{{region.defaultIpProtection}}" + }, + "x-onyxia": { + "overwriteDefaultWith": "region.defaultIpProtection" + } + }, + "ip": { + "type": "string", + "description": "the allow list of IP is whitespace", + "title": "Allowed IP", + "default": "0.0.0.0/0", + "x-form": { + "value": "{{user.ip}}" + }, + "x-onyxia": { + "overwriteDefaultWith": "{{user.ip}}" + }, + "hidden": { + "value": false, + "path": "security/allowlist/enabled" + } + } + } + }, + "networkPolicy": { + "type": "object", + "description": "Define access policy to the service", + "properties": { + "enabled": { + "type": "boolean", + "title": "Enable network policy", + "description": "Only pod from the same namespace will be allowed", + "default": true, + "x-form": { + "value": "{{region.defaultNetworkPolicy}}" + }, + "x-onyxia": { + "overwriteDefaultWith": "region.defaultNetworkPolicy" + } + } + } + } + } + }, "persistence": { "description": "Configuration for persistence", "type": "object", @@ -171,78 +240,30 @@ } } }, - "security": { - "description": "security specific configuration", + "kubernetes": { + "description": "configuration of your kubernetes access", "type": "object", "properties": { - "password": { - "type": "string", - "description": "Password", - "default": "changeme", - "x-form": { - "value": "{{project.password}}" - } + "enabled": { + "type": "boolean", + "description": "allow your service to access your namespace ressources", + "default": true + }, + "role": { + "type": "string", + "description": "bind your service account to this kubernetes default role", + "default": "view", + "hidden": { + "value": false, + "path": "kubernetes/enabled" }, - "allowlist": { - "type": "object", - "description": "IP protection", - "properties": { - "enabled": { - "type": "boolean", - "title": "Enable IP protection", - "description": "Only the configured set of IPs will be able to reach the service", - "default": true, - "x-form": { - "value": "{{region.defaultIpProtection}}" - } - }, - "ip": { - "type": "string", - "description": "the white list of IP is whitespace", - "title": "Whitelist of IP", - "x-form": { - "value": "{{user.ip}}" - } - } - } - }, - "networkPolicy": { - "type": "object", - "description": "Define access policy to the service", - "properties": { - "enabled": { - "type": "boolean", - "title": "Enable network policy", - "description": "Only pod from the same namespace will be allowed", - "default": true, - "x-form": { - "value": "{{region.defaultNetworkPolicy}}" - } - } - } - } - } - }, - "kubernetes": { - "description": "configuration of your kubernetes access", - "type": "object", - "properties": { - "enable": { - "type": "boolean", - "description": "allow your service to access your namespace ressources", - "default": true - }, - "role": { - "type": "string", - "description": "bind your service account to this kubernetes default role", - "default": "view", - "enum": [ - "view", - "edit", - "admin" - ] + "enum": [ + "view", + "edit", + "admin" + ] + } } - } }, "git": { "description": "Git user configuration", @@ -260,6 +281,9 @@ "x-form": { "value": "{{git.name}}" }, + "x-onyxia": { + "overwriteDefaultWith": "{{git.name}}" + }, "hidden": { "value": false, "path": "git/enabled" @@ -272,6 +296,9 @@ "x-form": { "value": "{{git.email}}" }, + "x-onyxia": { + "overwriteDefaultWith": "{{git.email}}" + }, "hidden": { "value": false, "path": "git/enabled" @@ -284,6 +311,9 @@ "x-form": { "value": "{{git.credentials_cache_duration}}" }, + "x-onyxia": { + "overwriteDefaultWith": "{{git.credentials_cache_duration}}" + }, "hidden": { "value": false, "path": "git/enabled" @@ -296,6 +326,9 @@ "x-form": { "value": "{{git.token}}" }, + "x-onyxia": { + "overwriteDefaultWith": "{{git.token}}" + }, "hidden": { "value": false, "path": "git/enabled" @@ -308,6 +341,9 @@ "x-form": { "value": "{{git.project}}" }, + "x-onyxia": { + "overwriteDefaultWith": "{{git.project}}" + }, "hidden": { "value": false, "path": "git/enabled" @@ -324,6 +360,82 @@ } } }, + "vault": { + "description": "Configuration of vault client", + "type": "object", + "properties": { + "enabled": { + "type": "boolean", + "description": "Add vault temporary identity inside your environment", + "default": true + }, + "token": { + "description": "token vault", + "type": "string", + "x-form": { + "value": "{{vault.VAULT_TOKEN}}" + }, + "x-onyxia": { + "overwriteDefaultWith": "{{vault.VAULT_TOKEN}}" + }, + "hidden": { + "value": false, + "path": "vault/enabled" + } + }, + "url": { + "description": "url of vault server", + "type": "string", + "x-form": { + "value": "{{vault.VAULT_ADDR}}" + }, + "x-onyxia": { + "overwriteDefaultWith": "{{vault.VAULT_ADDR}}" + }, + "hidden": { + "value": false, + "path": "vault/enabled" + } + }, + "mount": { + "description": "mount of the v2 secret engine", + "type": "string", + "x-form": { + "value": "{{vault.VAULT_MOUNT}}" + }, + "x-onyxia": { + "overwriteDefaultWith": "{{vault.VAULT_MOUNT}}" + }, + "hidden": { + "value": false, + "path": "vault/enabled" + } + }, + "directory": { + "description": "top level directory", + "type": "string", + "x-form": { + "value": "{{vault.VAULT_TOP_DIR}}" + }, + "x-onyxia": { + "overwriteDefaultWith": "{{vault.VAULT_TOP_DIR}}" + }, + "hidden": { + "value": false, + "path": "vault/enabled" + } + }, + "secret": { + "description": "the path of the secret to convert into a list of environment variables", + "type": "string", + "default": "", + "hidden": { + "value": false, + "path": "vault/enabled" + } + } + } + }, "s3": { "description": "Configuration of temporary identity", "type": "object", @@ -339,6 +451,9 @@ "x-form": { "value": "{{s3.AWS_ACCESS_KEY_ID}}" }, + "x-onyxia": { + "overwriteDefaultWith": "{{s3.AWS_ACCESS_KEY_ID}}" + }, "hidden": { "value": false, "path": "s3/enabled" @@ -350,6 +465,9 @@ "x-form": { "value": "{{s3.AWS_S3_ENDPOINT}}" }, + "x-onyxia": { + "overwriteDefaultWith": "{{s3.AWS_S3_ENDPOINT}}" + }, "hidden": { "value": false, "path": "s3/enabled" @@ -361,6 +479,9 @@ "x-form": { "value": "{{s3.AWS_DEFAULT_REGION}}" }, + "x-onyxia": { + "overwriteDefaultWith": "{{s3.AWS_DEFAULT_REGION}}" + }, "hidden": { "value": false, "path": "s3/enabled" @@ -372,6 +493,9 @@ "x-form": { "value": "{{s3.AWS_SECRET_ACCESS_KEY}}" }, + "x-onyxia": { + "overwriteDefaultWith": "{{s3.AWS_SECRET_ACCESS_KEY}}" + }, "hidden": { "value": false, "path": "s3/enabled" @@ -383,6 +507,9 @@ "x-form": { "value": "{{s3.AWS_SESSION_TOKEN}}" }, + "x-onyxia": { + "overwriteDefaultWith": "{{s3.AWS_SESSION_TOKEN}}" + }, "hidden": { "value": false, "path": "s3/enabled" @@ -390,45 +517,6 @@ } } }, - "vault": { - "description": "Configuration of vault client", - "type": "object", - "properties": { - "token": { - "description": "token vault", - "type": "string", - "x-form": { - "value": "{{vault.VAULT_TOKEN}}" - } - }, - "url": { - "description": "url of vault server", - "type": "string", - "x-form": { - "value": "{{vault.VAULT_ADDR}}" - } - }, - "mount": { - "description": "mount of the v2 secret engine", - "type": "string", - "x-form": { - "value": "{{vault.VAULT_MOUNT}}" - } - }, - "directory": { - "description": "top level directory", - "type": "string", - "x-form": { - "value": "{{vault.VAULT_TOP_DIR}}" - } - }, - "secret": { - "description": "the path of the secret to convert into a list of environment variables", - "type": "string", - "default": "" - } - } - }, "ingress": { "type": "object", "form": true, @@ -441,6 +529,10 @@ "x-form": { "hidden": true, "value": "{{project.id}}-{{k8s.randomSubdomain}}-0.{{k8s.domain}}" + }, + "x-onyxia": { + "hidden": true, + "overwriteDefaultWith": "{{project.id}}-{{k8s.randomSubdomain}}-0.{{k8s.domain}}" } }, "tensorboardHostname": { @@ -450,6 +542,10 @@ "x-form": { "hidden": true, "value": "{{project.id}}-{{k8s.randomSubdomain}}-board.{{k8s.domain}}" + }, + "x-onyxia": { + "hidden": true, + "overwriteDefaultWith": "{{project.id}}-{{k8s.randomSubdomain}}-board.{{k8s.domain}}" } } } @@ -465,6 +561,10 @@ "x-form": { "hidden": true, "value": "{{k8s.initScriptUrl}}" + }, + "x-onyxia": { + "hidden": true, + "overwriteDefaultWith": "{{k8s.initScriptUrl}}" } }, "personalInit": {